revisit `require_secret`

[escapewindow]

We no longer have any active need for require_secret, and #455 solves the CI need for it. We may still need require_secret, or additional ssh:// behavior changes, to create releases off of private repos.

Filing this in response to #455 (comment) , where we discussed potentially removing require_secret.